diff --git a/app/Http/Controllers/PollController.php b/app/Http/Controllers/PollController.php index cf3c971..10f905f 100644 --- a/app/Http/Controllers/PollController.php +++ b/app/Http/Controllers/PollController.php @@ -273,6 +273,10 @@ class PollController extends Controller public function edit(Request $request, Poll $poll) { + if($poll->admin_password == null || $request->query('password') != $poll->admin_password) { + return redirect()->action('PollController@viewResults', ['poll' => $poll]); + } + if($request->has('extra_codes')) { if($poll->duplicate_vote_checking != 'codes') { return redirect()->action('PollController@view', ['poll' => $poll]); diff --git a/resources/views/edit_poll.blade.php b/resources/views/edit_poll.blade.php index 489bf2c..42973f8 100644 --- a/resources/views/edit_poll.blade.php +++ b/resources/views/edit_poll.blade.php @@ -23,7 +23,7 @@
-
+ @method('PATCH') @csrf @@ -58,7 +58,7 @@ @if ($poll->duplicate_vote_checking == 'codes')
- + @method('PATCH') @csrf @@ -82,7 +82,7 @@

- + @method('PATCH') @csrf